Overview

overview

10

Static

static

10

8627e97cc7...cs.exe

windows7-x64

10

8627e97cc7...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8627e97cc74f5ba78886dcb738ca9830_NeikiAnalytics.exe

  • Size

    199KB

  • Sample

    240517-cnqkjada32

  • MD5

    8627e97cc74f5ba78886dcb738ca9830

  • SHA1

    88b26df6a293c36fbc0f3f1f8859c65e1858a56c

  • SHA256

    bb61e8e963437fefa68ebf4ca6a20f4fea370a036dab7e89e3a7e0a6ddf72a1e

  • SHA512

    46bccb10c84bfb8f633126475122163f7f8eca96ee4212d92289eb9237fe2560ff0f113826f53ebbcaa44508501399a68a7522eb7edc0bd0a870a090ca4939a5

  • SSDEEP

    6144:YujZRo61MtKdyR1SZSCZj81+jq4peBK034YOmFz1h:1k/6ZSCG1+jheBbOmFxh

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      8627e97cc74f5ba78886dcb738ca9830_NeikiAnalytics.exe

    • Size

      199KB

    • MD5

      8627e97cc74f5ba78886dcb738ca9830

    • SHA1

      88b26df6a293c36fbc0f3f1f8859c65e1858a56c

    • SHA256

      bb61e8e963437fefa68ebf4ca6a20f4fea370a036dab7e89e3a7e0a6ddf72a1e

    • SHA512

      46bccb10c84bfb8f633126475122163f7f8eca96ee4212d92289eb9237fe2560ff0f113826f53ebbcaa44508501399a68a7522eb7edc0bd0a870a090ca4939a5

    • SSDEEP

      6144:YujZRo61MtKdyR1SZSCZj81+jq4peBK034YOmFz1h:1k/6ZSCG1+jheBbOmFxh

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks